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FIG. 2 
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FIG. 3 



GENERATE A MESSAGE M TO BE ENCRYPTED 



I 



PICK A RANDOM ELEMENT fce[0...g-1] 



COMPUTE A SYMMETRIC KEY K = hash {g k mod p) 
SUCH THAT K IS A VALID ENCRYPTION KEY FOR A 
GIVEN ENCRYPTION TECHNIQUE 
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I 



COMPUTE A QUINTUPLE (a, 6, M\ c, C d ) 
WHERE a = y*g k , b - g a , M' = E k {M), c IS A PROOF 

OF KNOWLEDGE OF (a, Jb), AND C d IS A CERTIFICATE ON 
PUBLIC KEY y d 
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SEND (a, 6, M\ c, C d ) THROUGH THE NETWORK WITH 
INFORMATION IDENTIFYING SENDER AND RECIPIENT 
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RECEIVE (a, 6, M') FROM SERVER 



I 



COMPUTE B = b Xd (modp) 



I 



COMPUTE K= hash (a/B mod p) 



I 



COMPUTE M= B k {M') 
I 



OUTPUT PLAINTEXT MESSAGE M 
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FIG. 5 



SELECT 01,02 e[0...g-1] 



I 



COMPUTE r^yfgP 1 (mod p) 



I 



COMPUTE e - hash (r,a) 
\ 



COMPUTE si = 01 + e * a (mod q) 
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COMPUTE s2 = |82 + e » Jfc(mod q) 



OUTPUT ft si, s2) AS PROOF c 



500 
502 

504 
506 
508 

510 
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RECEIVE c = (r, si, s2) 
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COMPUTE e = hash(r, a) 
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VERIFY yS 1 * g sl = r*a e k~ 
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